The software for creating, monitoring, and orchestrating data processing scenarios in Airflow is vulnerable due to insufficient validation of input data. This vulnerability allows attackers to trigger service failures.

The software used for creating, monitoring, and orchestrating data processing scenarios in Airflow is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the GzipSource component in the Okio client HTTP library allows a attacker to cause a service failure.

The vulnerability of the GzipSource component in the Okio client HTTP library is related to the lack of a data type conversion mechanism. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the $resource service in the Angular application and single-page application development platforms, related to the use of a regular expression with inefficient computational complexity, allows attackers to trigger service failures.

The vulnerability of the application development environment and the Angular single-page application platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient checking of incoming requests. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to expose sensitive information or cause service failures by...

The vulnerability of the Spring-based Apache Kafka software platform (spring-kafka) is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code or trigger service failures.

The vulnerability of the Spring-based software platform for Apache Kafka spring-kafka is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

istio security update

istio 1.17.5-1 - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt 0.58.0-3 - Ensure that selinux build tags are set for all Go builds olcne 1.7.2-2 - Update kubevirt image versions fixing selinux=enforce not being supported 1.7.2-1 - Add Istio-1.17.5 and...

The vulnerability of the Lightweight HTTP Server component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a attacker to induce a service failure.

The vulnerability of the Lightweight HTTP Server component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the $resource service in the Angular application and single-page application development platform allows a attacker to cause a service failure.

The vulnerability of the $resource service in the Angular application and single-page application development platforms is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the r592_remove function in the R592 device driver of the Linux operating system can be exploited by attackers to cause system failures or other unpredictable behaviors.

The vulnerability of function r592remove in the R592 device driver of the Linux operating system is related to the detection of race conditions. Exploiting this vulnerability may allow an attacker to cause problems with the device’s functionality after it is released, which could lead to system...

The vulnerability of the input[url] function in the application development environment and the Angular platform allows attackers to trigger a service failure.

The vulnerability of the inputurl function in the application development environment and the Angular platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to deficiencies in the handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the angular.copy() function in the application design environment and the Angular development platform allows a attacker to trigger a service failure.

The vulnerability of the angular.copy function in the application and platform development environment for one-page applications related to Angular involves the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the JAXP component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the JAXP software platform of Oracle Java SE and the Oracle GraalVM Enterprise Edition virtual machine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Zoom SDK software for conducting video conferences, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerabilities of the functions avc420_ensure_buffer() and avc444_ensure_buffer() in the RDP client FreeRDP allow a attacker to cause a service failure or exert other effects.

The vulnerability of the functions avc420ensurebuffer and avc444ensurebuffer in the RDP client FreeRDP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects...

The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications allows a perpetrator to trigger a service failure.

The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the email.utils.parseaddr function in the Python interpreter allows a attacker to cause a service failure.

The vulnerability of the email.utils.parseaddr function in the Python programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Java Protocol Buffers protobuf-java environment library, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Java Protocol Buffers protobuf-java environment library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...